This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft
File: 535C0FE8EE7BE7E1C8897B031858C36344038072.mft (raw, json)
Hash identifier: wTS2E/SoSVCjEvTMmCAIpjUMU2b78YTANcfx3wm3DVM=
Subject key identifier: F0:6E:B4:75:02:EF:2D:0A:B8:1D:D8:F4:6A:0A:BD:8C:B9:34:11:97
Authority key identifier: 53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72
Certificate issuer: /CN=535C0FE8EE7BE7E1C8897B031858C36344038072
Certificate serial: 693300987FEBA48C92A3BFAD36676F0E5DEC94E7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft
Manifest number: D9
Signing time: Sun 01 Feb 2026 07:30:57 +0000
Manifest this update: Sun 01 Feb 2026 07:25:57 +0000
Manifest next update: Wed 04 Feb 2026 09:45:57 +0000
Files and hashes: 1: 535C0FE8EE7BE7E1C8897B031858C36344038072.crl (hash: LIlK6hKHvR1+Rqp7ouGHKCmD/scOklX53GYYt/vv/FI=)
2: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: hj7AxZha/0UMDCCJ1jFrzNiqEoW5ocfthigeLPCS3mE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl
rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 09:45:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:33:00:98:7f:eb:a4:8c:92:a3:bf:ad:36:67:6f:0e:5d:ec:94:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535C0FE8EE7BE7E1C8897B031858C36344038072
Validity
Not Before: Feb 1 07:25:57 2026 GMT
Not After : Feb 4 09:45:57 2026 GMT
Subject: CN=F06EB47502EF2D0AB81DD8F46A0ABD8CB9341197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:54:19:d9:37:0a:06:5b:f6:ed:49:c7:ed:
96:00:94:28:5f:9e:cb:0a:db:93:c3:26:75:1f:2e:
fc:16:f5:82:fc:fb:26:52:b4:31:22:1f:d2:b1:95:
ab:51:64:c5:30:9d:7d:3f:67:eb:bb:f6:de:67:79:
26:12:70:20:23:2a:30:05:a8:51:d6:29:ca:1b:4c:
4b:ff:53:91:85:da:fd:aa:d2:f7:8b:7e:3d:e5:4d:
3e:85:f8:69:2f:5f:ce:93:3d:19:cc:ad:a9:bc:51:
51:8b:bc:91:f5:63:65:fb:2b:d7:e5:97:4b:5e:0b:
0d:c1:89:9b:34:da:1c:7a:34:f0:9a:8a:de:ad:12:
e6:41:69:5e:99:09:75:06:ac:49:03:57:76:b9:05:
29:ee:01:a1:b6:d5:ff:e7:fc:c4:00:99:85:f1:b2:
02:03:b3:ca:72:d6:3d:a3:23:81:50:69:07:ec:73:
64:c5:c0:df:23:62:4c:26:ee:bf:60:cb:55:40:5a:
7a:01:07:ab:1f:ee:a3:23:ac:7f:c8:90:ba:b9:43:
64:cf:11:5b:30:a6:bb:f4:6c:d4:81:2a:95:aa:53:
f5:45:12:e5:3a:68:4b:42:c6:2f:d0:1d:df:f6:27:
4d:76:7b:86:b5:bc:1d:c2:2a:d7:ee:3c:d9:fd:9c:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6E:B4:75:02:EF:2D:0A:B8:1D:D8:F4:6A:0A:BD:8C:B9:34:11:97
X509v3 Authority Key Identifier:
keyid:53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6c:30:77:99:00:08:65:2b:d9:1c:69:2d:29:d2:28:58:0a:
32:44:33:03:e9:81:e7:0b:d7:5a:ee:57:0e:d2:70:e6:43:cb:
b6:8e:45:3f:58:46:d4:e3:e7:f4:cf:a5:a4:9b:e7:95:2c:bf:
ce:f5:bc:69:67:9d:90:c1:22:2f:4c:22:83:c9:10:64:58:f6:
ad:e2:dc:48:82:14:94:3a:c3:74:53:29:ad:a4:ce:c2:69:d2:
e0:7e:cf:42:87:dd:3e:7a:78:91:4d:7c:5f:54:31:f9:c9:48:
9a:97:56:d1:e8:65:63:7b:fe:6e:66:66:b1:d5:af:d8:7a:9f:
83:92:1e:12:07:19:13:95:dd:d7:05:f8:d2:d4:da:f8:f2:9a:
13:ba:1f:2c:c6:5c:a4:f6:c0:ac:cf:73:91:51:95:a7:6a:85:
7e:f8:e7:e0:9a:e8:61:a4:6d:16:9f:c9:cb:78:aa:88:f6:54:
e8:b7:c8:6a:96:72:be:f3:2f:93:d8:c1:3b:11:27:82:0b:88:
9d:f7:2c:b4:da:16:cb:ec:f2:7c:0d:3f:98:af:f5:c5:27:c8:
75:db:c8:87:3a:b8:16:43:d9:3a:c5:ed:f9:4b:7a:97:2e:f0:
53:8a:06:2d:ca:17:70:88:81:80:15:ad:58:9d:e5:b1:1a:92:
ea:e7:d5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:09 2026 by rpki-client